
INDIANA DATA BREACH NOTIFICATION FORM 

OAG Form 1079 (ROf 09-13) 

Identity Theft Unit 


OFFICE OF ATTORNEY GENERAL 
Consumer Protection Division 
Governmenl Center South, 5 m floor 
302 W. Washington Street 
Indianapolis, IN 46204 
(317) 233-4393-Fax 


Name and Address of Entity or Person that owns or licenses the data subject to the breach 


Name 

Lando Law Firm, LLC 
Street Address 
7612 Charlotte Highway 


Submitted by 
Kristopher Kleiner 

Firm Name {if different than entity) 
Norton Rose Fulbright US LLP 


Email 

krls.kleiner@nortonrosefulbright.com 


City 

State 

Indian Land 

sc 


Title 

Associate 


Zip Code 
29707 


Dated 

9/1/2015 

Telephone 

3038012758 


Relationship to Entity whose information was compromised 
Legal counsel 


Type of Organization (please select one) 



1 1 State of Indiana Government Agency 

1 1 Health Care 

0 Not-For-Profit 

1 1 Other Government Entity 

1 1 Financial Services 

0 Other - please specify 

0 Educational 

0 Other Commercial 



Number of Persons Affected 

1 


Total (Indiana include 



Date Breach Occurred (include start/end dates if known 


Date Breach Discovered 


Date Consumers Notified 


6/3/2015 






6/4/2015 



Reason for delay, if any, in sending notification 


Because the nature of the incident involved unauthorized web access to firm e-mail accounts, the forensic investigation of the 
incident required an analysis of both the e-mail account and the firm systems to determine the full extent of the incident. In addition, 
identification of individuals for notification purposes required export and review of numerous e-mail messages and attachments. 


Description of Breach ( select all that apply) 


0 Inadvertent disclosure 
0 Insider wrong-doing 

0 Loss or theft of device or media (e.g. computer, laptop, external 
_ hard drive, thumb drive, CD, tape) _ 


0 External system breach (e.g. hacking) 
0 Other 


Information Acquired { select all that apply) 


0 Social Security Number 0 Name In combination with (select all that apply) 

® Driver’s License Number □ State Identification Number □ State Identification Number 
□ Debit Card Number (In combination with security code, access code, password or PIN for account) 


List dates of previous breach notifications ( within last 12 months) 
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Manner of Notification to Affected Persons 


Attach a copy of a sample notification letter 
n Written 
[U Electronic (email) 

Q Telephone 


Identity Theft Protection Service Offered 

IP Yes 

Duration 

12 Months 

□ No 

Provider 

Experian 

Brief Description of Service: 
Experian's® ProtectMylDO 

D Alert 


Since this breach, we have taken the following steps to ensure it does not reoccur (attach additional pages if necessary) 


The Firm takes the privacy of personal information seriously, and deeply regrets that this Incident occurred. Upon learning of the 
incident, the Firm promptly took steps to address the situation, including changing the account credentials to prevent additional 
unauthorized access to the account and implemented additional security measures on all of our company e-mail accounts, including 
two-factor authentication, and providing additional information and employee training about these threats to help prevent this type of 
incident from recurring in the future. 


Any other information that my be relevant to the Office of Attorney General in reviewing this incident (attach additional pages if necessary) 










